
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
gb-rail-fares
Advanced tools
The British Rail Fares Engine is a library, API and user interface that can be used to return Britsh rail fares.
It relies on data from Rail Delivery Group. The rules around journey/fare validity are very specific to British rail and are not useful for other data sets.
It does not test the validity of journeys as it has no concept of a journey but it does provide a number of filters that can be applied without a journey:
CalendarRestrictionFilter
checks if the ticket code has any calendar restrictionsAdvancePurchaseFilter
checks the Advance Purchase booking horizon has been metRailcardBanFilter
checks whether there is a blanket ban on the railcard for a given dateSuppressedFareFilter
removes non-derivable fares that are used to suppress flow faresTicketTypeDateFilter
checks the ticket type start, end and quote datesSome rules like the validity codes return dates are in-built to the FareService
.
npm test
It is assumed that MySQL is installed locally and there is a database called fares
set up. The database credentials can be overriden by setting environment variables DATABASE_USERNAME
, DATABASE_PASSWORD
, DATABASE_HOST
DATABASE_NAME
.
npm run data
Starting the service will load some data into memory (~30 seconds) and then start the service on port 8002. Browsing http://localhost:8002
will display the test user interface.
npm start
Issues and PRs are very welcome.
This software is licensed under GNU GPLv3.
Copyright Linus Norton.
FAQs
Library, API and user interface for calculating British rail fares
The npm package gb-rail-fares receives a total of 24 weekly downloads. As such, gb-rail-fares popularity was classified as not popular.
We found that gb-rail-fares demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.